Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: N6Ldg2rkDYIuPXtzO2fmO/QoIxooz3SP1qbTJic+9Fo=
Subject key identifier: 76:BF:54:0C:B1:6E:A6:0E:0D:BA:BC:07:BA:46:23:21:74:D1:1C:B2
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 0194BCE079A42D605E7B938A7E9A116F918B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1207
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: 58fRXGkuWzxsz/vhavUdnYYxUtar7/dCaeu8u+nmlcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:a4:2d:60:5e:7b:93:8a:7e:9a:11:6f:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=76bf540cb16ea60e0dbabc07ba46232174d11cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:b3:ca:53:01:05:02:18:8c:65:57:1c:76:
8f:e5:29:c2:cc:da:06:e9:38:9e:28:a2:df:55:b4:
6b:1e:29:06:bf:6e:fe:57:6b:65:88:e3:b2:91:ec:
aa:ff:a1:51:37:c3:da:b1:ed:08:55:4a:ec:f0:11:
fb:b1:9f:94:1f:cb:de:94:e1:85:36:36:0c:20:c6:
d5:cf:ab:9a:2a:76:bc:7a:2a:c5:d4:4c:25:26:d6:
58:99:25:f9:f7:dd:ae:00:9b:aa:0a:d0:03:aa:c6:
ec:0d:a9:1b:18:44:8a:9c:1d:69:9b:35:0b:9e:8e:
af:d4:af:b6:b6:8e:39:ea:65:bf:73:ca:9d:3f:f4:
fe:24:aa:e9:0f:01:1b:00:22:75:1b:f5:79:b8:0d:
11:17:75:2e:2a:50:65:7b:fe:32:2f:a6:71:91:ac:
84:d9:07:bc:2e:0a:4b:7f:bc:21:c1:d8:f3:64:e6:
1e:96:13:4a:73:9c:dc:5b:4e:ae:d6:95:95:1a:b1:
c9:05:94:e5:5e:e3:1a:32:42:67:2c:9e:fc:55:f3:
4e:63:43:19:24:98:a6:f3:24:b7:6c:8b:69:a0:cb:
d7:2d:56:3b:6a:47:ab:84:f3:f7:66:a9:98:17:36:
ea:d0:26:b4:fd:ac:a0:3c:44:50:a4:4c:25:3a:f9:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:54:0C:B1:6E:A6:0E:0D:BA:BC:07:BA:46:23:21:74:D1:1C:B2
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:d0:bd:38:58:f1:75:54:e4:c4:59:db:ab:1d:00:ef:82:
b7:f8:1a:45:a7:16:ea:23:8d:3a:82:22:51:0a:f0:5e:a5:8b:
cf:f3:d4:9c:ae:db:53:e3:d7:62:20:bf:00:8f:ac:47:4e:94:
44:fc:c3:7e:6d:7e:93:4f:11:df:ba:0c:65:24:b4:8f:13:9a:
c8:87:14:60:75:38:27:c0:15:3b:aa:42:4e:85:d6:58:c6:f1:
4e:b0:a3:b3:82:4c:a5:da:ba:bc:51:c5:5e:d4:02:50:66:6c:
65:c2:bb:f5:60:bf:99:b0:66:e2:40:ad:4e:7c:80:3e:1e:78:
9f:3f:a2:81:14:1c:29:ae:bd:1d:15:37:50:49:71:a7:33:7c:
8c:86:c0:73:75:46:54:8d:bb:c7:05:e9:6e:36:ad:77:4d:03:
32:88:33:0e:a4:c5:67:50:21:21:22:46:12:61:8c:2f:ea:b0:
41:b3:64:56:81:1b:d9:74:f9:74:3e:68:f1:59:f6:ca:9f:11:
24:6c:67:60:03:46:ba:1f:6f:8b:0f:26:88:c2:9e:7e:9b:62:
05:c6:16:94:9c:c0:81:7e:bb:46:88:92:3b:7c:58:c3:75:94:
bc:76:05:06:48:29:39:2c:85:e9:5f:fc:77:21:22:ba:7b:63:
03:68:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client